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AMENDMENTS TO THE CLAIMS 

1-8. (Cancelled) 

9. (Currently Amended) A method for selecting a digital object in a database, the method 

comprising: 

generating a plurality of encryption keys , each encryption key associated with one of a 

plurality of digital objects stored in an electronic database; 
encrypting the plurality of digital objects using the plurality of associated encryption 

keys to g e n e rate a plurality of digital object ciphortexts ; 
encrypting the plurality of encryption keys using a first cryptography scheme k e y to 

gen e rat e a plurality of e ncryption key ciph e rt e xts ; 
transmitting to a requester the plurality of encrypted digital objects ciph e rt e xts and 

encryption keys ciph e rt e xts ; 
receiving from the requester aft at least one of the encryption keys, wherein the received 

encryption key has been ciph e rt e xt further encrypted using a second cryptography 

scheme key; 

generating a partially decrypted encryption key by decrypting the received encryption 
key ciph o rtext using the first cryptography scheme k e y to g e n e rat e a partially 
decrypt e d e ncryption k e y ; and 

transmitting the partially decrypted encryption key to the requester. 

10. (Previously Presented) The method of claim 9, further comprising encrypting the plurality of 

encryption keys by determining (encryption key) (random number R) mod (prime number p) for 
each key. 
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1 1 . (Currently Amended) The method of claim 9, further comprising decrypting the received 
encryption key ciphertext by determining (encryption key ciph e rt e xt ) (1/(random number R) mod 

(prime number p -I)) number p) 



12. (Currently Amended) The method of claim 10, further comprising performing the modulo 
operation if computation of a discrete logarithm is infcasibl o not possible . 



13. (Currently Amended) A method for selecting a digital object in a database, the method 
comprising: 

requesting a plurality of digital objects from an electronic database; 

receiving from the database the requested [[a]] plurality of ciph e rt e xt digital objects^ 

wherein each digital object has been encrypted using an associated encryption 

key; 

receiving from the database the [[a]] plurality of ciphert e xt keys associated with the 

plurality of ciphert e xt digital objects wherein each key has been encrypted using a 

first cryptography scheme ; 
selecting a ciphertext key from the plurality of received ciphert e xt keys; 
further encrypting the selected ciph e rt e xt key using a second cryptography scheme first 

k e y to g e nerat e a furth e r e ncrypted ciph e rt e xt k e y ; 
transmitting the furth e r e ncrypted ciph e rt e xt key to the database; 
receiving from the database a ciph e rt e xt the key wherein the key has been partially 

decrypted using the first cryptography scheme a second key; 
decrypting the partially decrypted ciph e rt e xt key using the second cryptography scheme 

first k e y to generate a decrypted key; and 
decrypting the received ciphertext digital object using the decrypted key. 
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14. (Previously Presented) The method of claim 13, further comprising encrypting the plurality 
of encryption keys by determining (encryption key) (random number R) mod (prime number p) 
for each key. 



1 5. (Currently Amended) The method of claim 13, further comprising decrypting the received 
encryption key ciphortoxt by determining (encryption key ciph e rt e xt ) ( 1/(random number R) mod 

(prime number p -1)) number p) 



16. (Currently Amended) The method of claim 14, further comprising performing the modulo 
operation if computation of a discrete logarithm is inf e asibl e not possible . 



17. (Currently Amended) A system for selecting a digital object in a database, the system 
comprising a processor for: 

generating a plurality of encryption keys , each encryption key associated with one of a 

plurality of digital objects stored in an electronic database; 
encrypting the plurality of digital objects using the plurality of associated encryption 

keys to g e nerate a plurality of digital object ciph e rt e xts ; 
encrypting the plurality of encryption keys using a first k e y to gen e rate a plurality of 

e ncryption k e y ciph e rt e xts cryptography scheme ; 
transmitting to a requester the plurality of encrypted digital obj e ct ciph e rt e xts objects and 

encryption key ciph e rt e xts keys ; 
receiving from the requester an at least one of the encryption keys, wherein the received 

encryption key has been ciph e rt e xt further encrypted using a second key 

cryptography scheme ; 
generating a partially decrypted encryption key by decrypting the received encryption 

key ciph e rt e xt using the first k e y to generate a partially d e crypt e d e ncryption k e y 

cryptography scheme ; and 
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transmitting the partially decrypted encryption key to the requester. 

18. (Previously Presented) The system of claim 17, wherein the processor is further configured 

or arranged for encrypting the plurality of encryption keys by determining (encryption 

key) (random number R) number p) for each key 

1 9. (Currently Amended) The system of claim 1 7, wherein the processor is further configured or 

arranged for decrypting the received encryption key ciph e rt e xt by determining 
(encryption key ciphortoxt ) (1/(randonl number R) mod ^ number p mod (prime number p). 

20. (Currently Amended) The system of claim 18, wherein the processor is further configured or 

arranged for performing the modulo operation if computation of a discrete logarithm is 
inf e asibl e not possible . 

21. (Currently Amended) A system for selecting a digital object in a database, the system 

comprising a processor for: 

requesting a plurality of digital objects from an electronic database; 

receiving from the database the requested [[a]] plurality of ciphertext digital objects^ 

wherein each digital object has been encrypted using an associated encryption 

key; 

receiving from the database the [[a]] plurality of ciph e rt e xt keys associated with the 

plurality of ciph e rt e xt digital objects wherein each key has been encrypted using a 
first cryptography scheme ; 

selecting a ciph e rt e xt key from the plurality of received ciphert e xt keys; 

further encrypting the selected ciph e rt e xt key using a second cryptography scheme fest 
k e y to g e n e rat e a furth e r e ncrypt e d ciph e rtext k e y ; 

transmitting the furth e r e ncrypt e d ciph e rt e xt key to the database; 



va- 1 59942 



Application No.: 09/834,106 



6 



Docket No.: 455392000900 



receiving from the database a ciphortoxt the key wherein the key has been partially 
decrypted using the first cryptography scheme a s e cond key; 

decrypting the partially decrypted ciphert e xt key using the second cryptography scheme 
first k e y to generate a decrypted key; and 

decrypting the received ciph e rt e xt digital object using the decrypted key. 

22. (Previously Presented) The system of claim 21, wherein the processor is further configured 

or arranged for encrypting the plurality of encryption keys by determining (encryption 

key) (random number R) (prime number p ) for each key 

23. (Currently Amended) The system of claim 21, wherein the processor is further configured or 

arranged for decrypting the received encryption key ciph e rt e xt by determining 
(encryption key ciph o rt e xt ) (1/(random number R) mod number p - !)) mod (prime number p). 

24. (Currently Amended) The system of claim 22, wherein the processor is further configured or 

arranged for performing the modulo operation if computation of a discrete logarithm is 
infeasibl e not possible . 

25. (Currently Amended) A machine-readable medium having program code stored thereon 

which, when executed by a machine, causes the machine to perform a method for 
selecting a digital object in a database, the method comprising: 

generating a plurality of encryption keys , each encryption key associated with one of a 
plurality of digital objects stored in an electronic database; 

encrypting the plurality of digital objects using the plurality of associated encryption 
keys to generat e a plurality of digital obj e ct ciphcrt e xts ; 

encrypting the plurality of encryption keys using a first cryptography scheme key to 
g e nerate a plurality of e ncryption k e y ciphcrtexts ; 
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transmitting to a requester the plurality of encrypted digital object ciph e rt e xts objects and 

encryption key ciph e rt e xts keys ; 
receiving from the requester an at least one of the encryption keys, wherein the received 

encryption key has been ciph e rt e xt further encrypted using a second key 

cryptography scheme ; 
generating a partially decrypted encryption key by decrypting the received encryption 

key ciph e rt e xt using the first k e y to g e n e rat e a partially d e crypt e d e ncryption k e y 

cryptography scheme ; and 
transmitting the partially decrypted encryption key to the requester. 

26. (Previously Presented) The machine-readable medium of claim 25, wherein the method 

further comprises encrypting the plurality of encryption keys by determining (encryption 

key) (random number R) number p) for each key 

27. (Currently Amended) The machine-readable medium of claim 25, wherein the method 

further comprises decrypting the received encryption key ciph e rt e xt by determining 
(encryption key ciphortoxt ) (1/(random number R) mod (prime number p " J)) mod (prime number p). 

28. (Currently Amended) The machine -readable medium of claim 26, wherein the modulo 

operation is performed if computation of a discrete logarithm is inf e asiblo not possible . 

29. (Currently Amended) A machine-readable medium having program code stored thereon 

which, when executed by a machine, causes the machine to perform a method for 
selecting a digital object in a database, the method comprising: 
requesting a plurality of digital objects from an electronic database; 
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receiving from the database the requested [[a]] plurality of ciph e rt e xt digital objects,, 
wherein each digital object has been encrypted using an associated encryption 
key; 

receiving from the database the [[a]] plurality of ciphortoxt keys associated with the 

plurality of ciphertext digital objects wherein each key has been encrypted using a 

first cryptography scheme ; 
selecting a ciphert e xt key from the plurality of received ciphertext keys; 
further encrypting the selected ciph e rt e xt key using a second cryptography scheme fost 

key to g e n e rat e a further encrypted ciph e rt e xt k e y ; 
transmitting the furth e r e ncrypted ciph e rtext key to the database; 
receiving from the database a ciphert e xt the key wherein the key has been partially 

decrypted using the first cryptography scheme a s e cond key; 
decrypting the partially decrypted ciphert e xt key using the second cryptography scheme 

first key to generate a decrypted key; and 
decrypting the received ciphertext digital object using the decrypted key. 

30. (Previously Presented) The machine-readable medium of claim 29, wherein the method 

further comprises encrypting the plurality of encryption keys by determining (encryption 

key) (random number R) (p rime number p) for each key. 

3 1 . (Currently Amended) The machine-readable medium of claim 29, wherein the method 

further comprises decrypting the received encryption key ciph e rt e xt by determining 
(encryption key ci p he r text) (1/(randoni number R) mod ^ number p mod (prime number p). 

32. (Currently Amended) The machine-readable medium of claim 27, wherein the method 

further comprises performing the modulo operation if computation of a discrete 
logarithm is inf e asibl e not possible . 
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